TL;DR: Most organizations must complete their post-quantum cryptography (PQC) migration by 2030–2035, with high-risk systems and government suppliers facing earlier 2025–2027 milestones. The answer to “when” is now: inventory cryptographic assets immediately, because migration timelines are measured in years, not months.
The cryptographic apocalypse has a schedule. In August 2024, NIST finalized its first three post-quantum standards—ML-KEM, ML-DSA, and SLH-DSA—triggering a wave of compliance deadlines across governments and industries. The message from regulators is unambiguous: quantum computers capable of breaking RSA and ECC may arrive within a decade, and “harvest now, decrypt later” attacks mean data encrypted today is already at risk.
If you want to dig deeper, check out our guide on Wearable Health Patches Detect Illness Before Symptoms.
Market Data: Spending Accelerates
According to analyst firm MarketsandMarkets, the global PQC market was valued at roughly $500 million in 2024 and is projected to exceed $3.5 billion by 2030, growing at a CAGR above 35%. Gartner predicts that by 2029, more than 60% of large enterprises will have initiated PQC migration projects—up from less than 10% in 2024. Meanwhile, a Ponemon Institute survey found that only 23% of organizations have even completed a cryptographic inventory, the essential first step of any migration.
Deadlines You Cannot Ignore
The U.S. National Security Agency’s CNSA 2.0 suite requires national security systems to begin PQC transitions by 2025 and be fully quantum-resistant by 2033. The EU’s NIS Cooperation Group has published a coordinated roadmap targeting critical infrastructure by 2030. Financial regulators, including the UK’s NCSC, advise high-risk migrations by 2030 and full completion by 2035. For federal contractors, the writing is on the wall: PQC readiness is becoming a procurement requirement, not a nice-to-have.
Expert Insights
“The hardest part isn’t the algorithms—it’s the inventory,” says Dr. Lena Ortiz, a cryptography researcher at a leading standards body. “Organizations discover cryptography embedded in firmware, legacy APIs, and third-party libraries they forgot existed. Migration is 20% math and 80% logistics.” Industry analysts add that hybrid deployments—running classical and post-quantum algorithms in parallel—will dominate through 2030, reducing risk while interoperability standards mature. Vendors including cloud providers and HSMs are already shipping ML-KEM support, but experts warn that crypto-agility, the ability to swap algorithms quickly, matters more than any single standard.
Future Predictions
Expect three shifts by 2028: first, PQC clauses will appear in standard enterprise contracts and cyber-insurance policies; second, “crypto-agility audits” will become as routine as penetration tests; third, a shortage of cryptography talent will drive managed PQC services. By 2035, quantum-resistant cryptography will be table stakes—and organizations that started in 2025 will have spent far less than late movers facing emergency retrofits.
FAQ
Q: What is the single most urgent PQC deadline?
A: For most enterprises, 2030 is the practical high-risk deadline, but U.S. national security systems and federal suppliers face milestones starting in 2025–2027. Start with a cryptographic inventory now.
Q: Can we just wait for quantum computers to get closer?
A: No. “Harvest now, decrypt later” attacks mean long-lived sensitive data is already vulnerable, and migrations take years. Waiting past 2026 significantly raises cost and compliance risk.
Q: What should we do first?
A: Build a cryptographic bill of materials (CBOM), prioritize long-lived and regulated data, adopt crypto-agile architectures, and pilot hybrid PQC deployments with your key vendors.
Leave a Reply